$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960/c0f5b104-40cb-33aa-b6e5-6f6866c14714.roa File: c0f5b104-40cb-33aa-b6e5-6f6866c14714.roa (raw, json) Hash identifier: 9ZWGBcptfA4gUqZABRUfjgIFQA66mzt1vzroLSkAT1k= Subject key identifier: 1D:37:90:EB:69:E9:75:48:D4:1F:FF:6C:43:5D:DA:5C:AA:87:26:84 Certificate issuer: /CN=dfbb4144-3bd6-4c5c-9b1f-60af8dda0960 Certificate serial: 010D0C9F4328584AADF1120F798C09431CE60C00 Authority key identifier: 44:50:E6:9D:82:61:B8:2C:3F:7B:A8:79:53:EF:CA:E6:74:2B:90:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960/c0f5b104-40cb-33aa-b6e5-6f6866c14714.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 11142 IP address blocks: 192.69.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:12:0f:79:8c:09:43:1c:e6:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfbb4144-3bd6-4c5c-9b1f-60af8dda0960 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=dcd532e4-6035-48c9-af1c-6974bc96fd61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:df:3d:a3:42:b1:f8:4a:39:81:69:3c:0f:28: 20:a3:ca:6f:af:0b:ca:ef:c9:96:fd:27:5a:76:a7: ee:d4:db:38:7d:ce:d7:72:dd:38:8f:57:7a:45:2d: cc:9e:f2:bd:08:e5:8d:99:5c:e0:d2:a8:ef:da:92: ba:7d:bf:dd:e0:c1:f7:0a:fb:7b:04:61:ae:fa:b3: c2:a3:08:8a:06:15:ec:81:91:5d:e3:3c:d4:56:92: 66:f9:53:45:6a:fc:26:eb:07:c8:22:be:37:ca:fd: 8b:8a:e9:a2:5e:3e:cb:6c:32:28:14:5e:d7:de:5c: c6:a0:d9:be:60:28:be:f1:97:d7:e2:e8:b1:a0:99: 42:a2:74:06:eb:38:12:27:39:1a:c6:f2:c4:fd:c0: 60:9e:95:95:0b:fb:3e:ae:35:57:aa:90:fe:fb:68: c6:1f:c1:ea:9f:0d:c9:01:e9:f8:68:80:a8:55:c7: e2:39:ff:15:e4:b5:43:b7:82:aa:0d:48:49:18:33: 69:20:bc:23:eb:26:02:4a:c9:4c:cc:b3:40:00:3a: 98:c4:b1:1e:b0:0c:81:87:96:dd:28:a6:26:e2:9e: da:2f:5f:7b:19:82:d3:4f:f4:7e:f5:20:9d:d0:40: ee:ee:dc:4f:6d:bb:d1:4a:5a:11:c9:7a:38:0e:60: 5e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:37:90:EB:69:E9:75:48:D4:1F:FF:6C:43:5D:DA:5C:AA:87:26:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960/c0f5b104-40cb-33aa-b6e5-6f6866c14714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960.crl X509v3 Authority Key Identifier: keyid:44:50:E6:9D:82:61:B8:2C:3F:7B:A8:79:53:EF:CA:E6:74:2B:90:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dfbb4144-3bd6-4c5c-9b1f-60af8dda0960.cer sbgp-ipAddrBlock: critical IPv4: 192.69.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:82:59:3b:8c:fe:1e:55:97:9a:58:43:50:d4:28:d8:f8:7b: ba:21:f9:64:cb:1d:e4:a6:6c:d0:81:ea:86:42:60:82:84:49: eb:34:e8:cb:df:d8:20:ab:b6:d8:46:1e:30:38:8e:09:a4:c9: 1a:a5:46:5f:42:48:a6:31:d8:a6:f6:c7:69:01:ec:4c:70:92: a3:14:58:d5:9e:55:ff:84:53:ef:c1:3d:23:75:ea:26:0b:41: ac:1d:67:eb:a1:15:18:53:28:a1:26:28:4c:2d:2d:4a:d5:1f: d9:15:68:d4:5a:5e:21:2c:2a:e0:a7:90:47:b4:de:89:f6:c6: 7a:d8:60:d9:5c:1b:de:97:25:a7:a8:89:91:19:22:ed:27:29: cf:0e:cb:f8:a8:0a:29:bf:b3:e0:3d:54:26:dc:43:59:e0:44: 43:3c:64:40:be:c2:98:79:51:68:a1:d7:6c:2e:ff:08:2f:02: ef:80:6a:eb:e7:82:8b:8d:1b:00:64:39:d8:58:b9:8a:a3:e5: 0d:3c:1e:57:99:a3:d7:83:39:10:ac:5c:84:a0:e0:99:34:05: f9:57:ba:04:a9:37:e4:ba:ae:4c:0a:92:51:0a:c9:b9:e7:24: e5:08:dc:86:a9:6f:ea:e2:0e:f3:e4:47:48:7c:13:5e:37:d3: 81:98:27:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8RIPeYwJQxzmDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZiYjQxNDQtM2JkNi00YzVjLTliMWYtNjBhZjhkZGEw OTYwMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ZGNkNTMyZTQtNjAzNS00OGM5LWFmMWMtNjk3NGJjOTZmZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt89o0Kx+Eo5gWk8Dyggo8pvrwvK78mW/Sda dqfu1Ns4fc7Xct04j1d6RS3MnvK9COWNmVzg0qjv2pK6fb/d4MH3Cvt7BGGu+rPC owiKBhXsgZFd4zzUVpJm+VNFavwm6wfIIr43yv2LiumiXj7LbDIoFF7X3lzGoNm+ YCi+8ZfX4uixoJlConQG6zgSJzkaxvLE/cBgnpWVC/s+rjVXqpD++2jGH8Hqnw3J Aen4aICoVcfiOf8V5LVDt4KqDUhJGDNpILwj6yYCSslMzLNAADqYxLEesAyBh5bd KKYm4p7aL197GYLTT/R+9SCd0EDu7txPbbvRSloRyXo4DmBeBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB03kOtp6XVI1B//bENd2lyqhyaEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZmJi NDE0NC0zYmQ2LTRjNWMtOWIxZi02MGFmOGRkYTA5NjAvYzBmNWIxMDQtNDBjYi0z M2FhLWI2ZTUtNmY2ODY2YzE0NzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZGZiYjQxNDQtM2JkNi00YzVjLTli MWYtNjBhZjhkZGEwOTYwL2RmYmI0MTQ0LTNiZDYtNGM1Yy05YjFmLTYwYWY4ZGRh MDk2MC5jcmwwHwYDVR0jBBgwFoAURFDmnYJhuCw/e6h5U+/K5nQrkDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZmJiNDE0NC0zYmQ2LTRjNWMtOWIxZi02MGFm OGRkYTA5NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwEUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCCWTuM/h5Vl5pYQ1DUKNj4e7oh+WTLHeSmbNCB6oZCYIKESes06Mvf 2CCrtthGHjA4jgmkyRqlRl9CSKYx2Kb2x2kB7ExwkqMUWNWeVf+EU+/BPSN16iYL QawdZ+uhFRhTKKEmKEwtLUrVH9kVaNRaXiEsKuCnkEe03on2xnrYYNlcG96XJaeo iZEZIu0nKc8Oy/ioCim/s+A9VCbcQ1ngREM8ZEC+wph5UWih12wu/wgvAu+Aauvn gouNGwBkOdhYuYqj5Q08HleZo9eDORCsXISg4Jk0BflXugSpN+S6rkwKklEKybnn JOUI3Iapb+riDvPkR0h8E14304GYJxA= -----END CERTIFICATE-----Generated at Wed Aug 6 11:20:08 2025 by rpki-client